Re: [v6ops] AWS ipv6-only features

Philip Homburg <pch-v6ops-11@u-1.phicoh.com> Wed, 01 December 2021 06:36 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C71C03A0595 for <v6ops@ietfa.amsl.com>; Tue, 30 Nov 2021 22:36:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TSe3ANkRatX9 for <v6ops@ietfa.amsl.com>; Tue, 30 Nov 2021 22:36:34 -0800 (PST)
Received: from stereo.hq.phicoh.net (pch.xs4all.nl [83.160.102.151]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35F2B3A0594 for <v6ops@ietf.org>; Tue, 30 Nov 2021 22:36:32 -0800 (PST)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-CHACHA20-POLY1305) (Smail #158) id m1msJDa-0000HCC; Wed, 1 Dec 2021 07:35:50 +0100
Message-Id: <m1msJDa-0000HCC@stereo.hq.phicoh.net>
To: v6ops@ietf.org
From: Philip Homburg <pch-v6ops-11@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <CAD6AjGRAkpMDaAh31mVL=+Gcz5PHejUxxLazr4Xb=vVRHfaSpw@mail.gmail.com> <CAO42Z2z8u_DQMd9eNSQp_RhBinXk2KyH4pdbVLMEqOta-hoG1w@mail.gmail.com> <CADzU5g5odQ82FJ0TsdNxFB42OkgLZ+PWanLLrK1roLojAUS54A@mail.gmail.com> <CAO42Z2z+ZJ_pLwZmBjZ_HFsNXQ6jok-PMRTP23ZD2UMch61wtw@mail.gmail.com> <CAM5+tA9JhRWfZ2VLLQnT8Mg+Xng-+Rc-oQnX8Ma5DguL2uDO8w@mail.gmail.com> <C7A86994-311E-4D94-80AE-74A15D6D62B1@delong.com> <m1mrzjf-0000GqC@stereo.hq.phicoh.net> <C75C1488-6B27-4BE4-8B68-BFBF35748369@delong.com>
In-reply-to: Your message of "Tue, 30 Nov 2021 09:14:33 -0800 ." <C75C1488-6B27-4BE4-8B68-BFBF35748369@delong.com>
Date: Wed, 01 Dec 2021 07:35:49 +0100
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/VUTfsDz2aHNIl8-dyPusiFsLcHE>
Subject: Re: [v6ops] AWS ipv6-only features
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Dec 2021 06:36:40 -0000

> > Is this common practice somewhere? Do people expect that something sensible
> > will happen if you try that? Is it documented what should happen?
> 
> Probably more common in mDNS than DNS, but yes, something sensible
> SHOULD happen as documented in the RFCs:
> 
> AAAA record sorting in getaddrinfo() or getnameinfo() should return
> the ULA records before the GUA records in the linked list.
> 
> As a result, an application that sensibly iterates through the list
> in order (as is expected behavior) should connect via GUA if possible
> (if not, it should rapidly receive an error and move on to the next
> item in the list, so no extraordinary processing or coding is
> required in the application).

mDNS is a bit of a boring case. If you get an mDNS reply is likely that the
destination is on the same subnet. It is possible to mess that up, but
that is more upto the network admin.

With DNS, how is it sensible to put both a ULA and a GUA in a single
DNS record?  Without happy eyeballs (and anything that is not
a webbrowser is unlikely to implement happy eyeballs), putting in two 
addresses for a host just means waiting twice as long when the host is
down.

What benefit do you expect to get from putting two addresses for the same
host in DNS (at the same DNS name, in the same view)?

Having two views (or names), one for external use with a GUA and one internal
use with ULA makes sense.